Get-ADUser -Identity "sansa.stark" | Set-ADAccountControl -TrustedForDelegation $true